While cyberattacks against hospitals and clinics grew modestly in the first half of 2026, attacks on service providers and other healthcare businesses more than doubled.
Hospitals are seeing more impersonation and social engineering-driven attacks, while facing the ongoing challenge of finding and patching legacy devices, says Errol Weiss, chief security officer at Health-ISAC.
“Hospital CISOs I talk to are taking these threats seriously,” he says. “Their No. 1 challenge is having the resources to adequately protect the hospital networks — that means having the budget to recruit and retain experienced cybersecurity talent and acquiring much-needed technology, but structural realities like legacy medical device complexity, always-on clinical operations, and heavy third-party dependence mean that attackers still see plenty of opportunity.”
